Certified Information Privacy Professional – Europe (CIPP/E) — Question 23

A key component of the OECD Guidelines is the “Individual Participation Principle”. What parts of the General Data Protection Regulation (GDPR) provide the closest equivalent to that principle?

Answer options

• A. The lawful processing criteria stipulated by Articles 6 to 9
• B. The information requirements set out in Articles 13 and 14
• C. The breach notification requirements specified in Articles 33 and 34
• D. The rights granted to data subjects under Articles 12 to 22

Correct answer: D

Explanation

Option D is correct because the rights granted to data subjects under Articles 12 to 22 of the GDPR directly empower individuals to participate in decisions regarding their personal data. The other options, while important for data protection, do not specifically focus on individual participation and rights in the same manner as Articles 12 to 22 do.